SoftBizScripts Dating Script 1.0 - products.php SQL Injection

SoftBizScripts Dating Script 1.0 - products.php SQL Injection source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A...

SoftBizScripts Dating Script 1.0 - featured_photos.php SQL Injection

SoftBizScripts Dating Script 1.0 - featuredphotos.php SQL Injection source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. ...

vCard PRO - 'rating.php?card_id' SQL Injection

source: https://www.securityfocus.com/bid/18699/info VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromi...

SaphpLesson 1.1/2.0/3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/18501/info The saphplesson module is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the...

Cisco CallManager 3.x4.x - Web Interface ccmadminphonelist.asp?Pattern Cross-Site Scripting

Cisco CallManager 3.x4.x - Web Interface ccmadminphonelist.asp?Pattern Cross-Site Scripting source: https://www.securityfocus.com/bid/18504/info Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-suppli...

CEScripts (Multiple Scripts) - Cross-Site Scripting

CEScripts Multiple Scripts - Cross-Site Scripting source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

VBZoom 1.01.1 - Multiple SQL Injections

VBZoom 1.01.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/18403/info VBZooM is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...

CEScripts (Multiple Scripts) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

fxAPPXSS.txt

fx-APP Version 0.0.8.1 Homepage: http://fx-app.org/ Effected files: search input box index.cgi input boxes on your profile adding a menu item ------------------------------------------------------- I noticed there was already several BID's on the a script WebAPP:...

Bookmark4U 2.0 - incfunction.php?env[include_prefix] Remote File Inclusion

Bookmark4U 2.0 - incfunction.php?envincludeprefix Remote File Inclusion source: https://www.securityfocus.com/bid/18281/info Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

Bookmark4U 2.0 - inccommon.php?env[include_prefix] Remote File Inclusion

Bookmark4U 2.0 - inccommon.php?envincludeprefix Remote File Inclusion source: https://www.securityfocus.com/bid/18281/info Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

MySQL Anonymous Login Handshake Remote Information Disclosure

The MySQL database server on the remote host reads from uninitialized memory when processing a specially crafted login packet. An unauthenticated attacker may be able to exploit this flaw to obtain sensitive information from the affected host as returned in an error packet. %NASLMINLEVEL 70300 C...

ProPublish 2.0 (catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to...

dotWidget for articles 2.0 - '/admin/index.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote fil...

Ovidentia 5.6.x5.8 - search.php?babInstallPath Remote File Inclusion

Ovidentia 5.6.x5.8 - search.php?babInstallPath Remote File Inclusion source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues...

Ovidentia 5.6.x5.8 - vacadm.php?babInstallPath Remote File Inclusion

Ovidentia 5.6.x5.8 - vacadm.php?babInstallPath Remote File Inclusion source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues...

MyBloggie 2.1.x - 'MyBloggie_Root_Path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19449/info MyBloggie is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in...

Ovidentia 5.6.x/5.8 - 'vacadm.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

phpBB 2.0.x - template.php Remote File Inclusion

phpBB 2.0.x - template.php Remote File Inclusion source: https://www.securityfocus.com/bid/18255/info The phpBB application is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this iss...

PHP ManualMaker 1.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18244/info PHP ManualMaker is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary HTML and script code...